IN THE CLAIMS 



Claims 1-35 (Cancelled) 

36. (new) A method of applying an access privilege to a logical storage medium 
in communication with a computer, the method comprising the steps of: 

(a) providing an end user access privilege indicative of at least one of an enabled 
operation and a restricted operation to be performed on a logical storage medium obviating a 
need for a reserved portion of said logical storage medium; 

(b) associating said access privilege with at least one logical portion of said 
logical storage medium; 

(c) applying said access privilege to at least one data identifier; and 

(d) providing a transparent trap layer. 

37. (new) The method as defined in claim 36, wherein said at least one logical 
portion of said logical storage medium comprises at least one of a partition, a directory, a 
special file, and a file. 

38. (new) The method as defined in claim 36, wherein said at least one logical 
portion of said logical storage medium comprises an entire logical storage medium. 

39. (new) The method as defined in claim 36, wherein said at least one data 
identifier comprises at least one of a file name, a file mask, a special file, and a directory. 
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40. (new) The method as defined in claim 36, wherein said operations comprise 
at least one of reading, executing, appending, creating new objects, deleting, renaming, 
moving, overwriting, modifying attributes, and modifying data object security. 

(new) The method as defined in claim 36, further comprising: 
applying a plurality of access privileges to said at least one data identifier. 

(new) The method as defined in claim 36, further comprising: 
applying a plurality of access privileges to said portion of said logical storage 

43. (new) The method as defined in claim 36, further comprising: 

(e) applying said access privilege to said logical storage medium wherein said 
logical storage medium is itself a logical portion of another logical storage medium, and 
wherein a logical portion of said another logical storage medium is specified by at least one 
data identifier. 

44. (new) The method as defined in claim 36, wherein said at least one data 
identifier comprises a free space portion. 

45. (new) The method as defined in claim 36, wherein said at least one data 
identifier comprises newly created data. 



41. 

(e) 



(e) 
medium. 
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